Vulnerabilities (CVE)

Filtered by vendor Alayacare Subscribe
Filtered by product Procura
Total 1 CVE
CVE Vendors Products Updated CVSS v2 CVSS v3
CVE-2023-6451 1 Alayacare 1 Procura 2025-01-09 N/A 8.6 HIGH
Publicly known cryptographic machine key in AlayaCare's Procura Portal before 9.0.1.2 allows attackers to forge their own authentication cookies and bypass the application's authentication mechanisms.